QUESTION: 9

A penetration tester was able to gain access to a system using an exploit. The following is a snippet of the code that was utilized:

Which of the following commands should the penetration tester run post-engagement?

grep -v apache ~/bash_history> ~/.bash_history
rm -rf /tmp/apache
chmod 600 /tmp/apache
taskkill /IM ג€apacheג€ /F

Answer(s): B

Reveal Solution Next Question

QUESTION: 10

Which of the following is MOST important to include in the final report of a static application-security test that was written with a team of application developers as the intended audience?

Executive summary of the penetration-testing methods used
Bill of materials including supplies, subcontracts, and costs incurred during assessment
Quantitative impact assessments given a successful software compromise
Code context for instances of unsafe typecasting operations

Answer(s): D

Reveal Solution Next Question

QUESTION: 11

SIMULATION
You are a penetration tester reviewing a client's website through a web browser.

INSTRUCTIONS
Review all components of the website through the browser to determine if vulnerabilities are present.
Remediate ONLY the highest vulnerability from either the certificate, source, or cookies.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

See Explanation section for answer.

Answer(s): A

Explanation:

Step 1: Generate Certificate Signing Request
Step 2: Submit CSR to the CA -
Step 3: Remove certificate from the server
Step 4: Install re-issued certificate on the server

Reveal Solution Next Question

QUESTION: 12

A Chief Information Security Officer wants a penetration tester to evaluate the security awareness level of the company's employees.
Which of the following tools can help the tester achieve this goal?

Metasploit
Hydra
SET
WPScan

Answer(s): C

Reveal Solution Next Question

Free PT0-002 Exam Braindumps (page: 3)

QUESTION: 9

QUESTION: 10

QUESTION: 11

Explanation:

QUESTION: 12